package SV_IL_SESSION_CLIENT;
import javax.servlet.http.*;
import javax.servlet.*;
import java.security.*;
import java.io.*;
public class Vulnerable {
    class Test{
        public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
            String id = request.getRequestedSessionId();
            if(authenticate(id)) {
           ...
            }
        }
    }
}
